Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: z7Q5EadFFP0k0KLsPiMpDL4WT9B1Afk7MpKZ0y+iuW4=
Subject key identifier: FC:E5:9C:9A:7C:49:72:DC:78:02:16:03:0E:CF:4C:10:EA:F3:49:F9
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 019D2771D426EA002C46A72A579E31DAD2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 05
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: f8Y88JBigYLEtZznXNCvXRM+buyQxtm/omVtJdPylcw=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d4:26:ea:00:2c:46:a7:2a:57:9e:31:da:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=fce59c9a7c4972dc780216030ecf4c10eaf349f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d9:c3:ae:fc:17:c2:8a:86:fa:71:a8:63:39:
5d:1b:30:30:76:8b:9d:1a:c0:eb:5c:31:c6:7e:9d:
ed:d3:de:06:7b:e1:a0:a9:e8:51:05:26:d3:f4:35:
07:1e:c2:dc:92:c2:22:6c:4f:8e:34:6b:50:ee:99:
0e:ce:86:ef:d2:cf:3a:32:42:dd:b9:b0:d6:80:94:
9b:13:84:68:3b:9f:e3:94:af:d4:17:bd:3b:a7:30:
75:a0:c5:26:cd:10:06:4d:4e:ba:a6:cc:10:e1:1d:
e1:db:9f:6c:79:2f:4e:17:b8:e9:a7:6d:94:f6:9f:
81:8c:fe:4f:f2:d8:cf:4a:83:d9:e3:f5:b5:35:36:
de:fc:cd:6e:f4:c6:27:ff:fb:bb:eb:1b:bd:f8:f7:
46:0e:2c:65:11:57:3a:5a:36:48:75:88:c1:89:89:
66:e1:69:d6:e7:17:d1:fc:c2:95:25:d6:58:f1:e0:
d8:d6:51:ee:f1:46:50:aa:51:64:67:62:2b:c1:96:
1d:0a:fa:0b:4a:58:45:de:e5:8a:21:00:de:b0:fe:
5a:bd:58:08:8d:99:9e:7e:d4:85:db:73:97:d5:f3:
02:61:66:82:87:ee:a4:2e:55:b5:73:3c:14:d1:69:
df:37:f0:19:66:06:19:99:89:68:f6:ac:7a:c7:22:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E5:9C:9A:7C:49:72:DC:78:02:16:03:0E:CF:4C:10:EA:F3:49:F9
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ab:90:e6:dd:58:06:ed:5b:82:f1:bf:00:d5:ca:c8:4e:7e:
08:f7:40:6b:d2:df:37:fa:a9:9d:7d:29:b8:70:36:ba:95:ea:
8c:46:2c:96:c0:17:26:09:ff:a1:75:4e:91:a5:60:e9:e2:99:
ee:ff:2d:1d:46:55:96:28:e8:f0:29:6c:ed:63:b7:fe:b4:c5:
5b:38:6b:05:a6:25:67:18:ea:2b:a6:17:0c:a8:f7:9e:2c:95:
05:c5:d0:c8:1c:db:02:6e:cb:4d:a8:2d:67:0d:37:a5:68:90:
9e:5b:2f:44:91:9d:57:4e:4a:e5:dd:b1:b1:36:d7:e4:93:2d:
2d:fc:2f:80:ad:f1:e3:df:ab:df:8a:44:5a:34:93:aa:ca:68:
bb:1c:75:7d:14:bc:1d:b5:3f:b2:91:93:4a:a4:6e:06:21:15:
3b:22:d8:c7:b2:63:2c:78:6a:20:0b:24:3b:22:be:e3:75:24:
56:06:d6:ea:48:d2:e3:e8:b5:65:5e:4c:67:27:f1:47:5f:fd:
53:a4:83:26:93:f4:96:83:17:8f:0e:47:0f:9f:f9:9c:72:cb:
b0:d0:a3:c2:6a:01:1f:71:a1:60:6f:d0:36:e7:64:64:84:58:
7b:0e:26:61:8c:07:89:b6:2a:2f:26:69:0b:70:1b:d5:32:c6:
2f:8a:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:32 2026 by rpki-client